A campaign involving 16 malicious Chrome extensions infected over 3.2 million users worldwide, exploiting browser vulnerabilities for advertising fraud and SEO manipulation. Discovered by GitLab Threat Intelligence, these extensions stripped security protections, injected harmful payloads, and hijacked user sessions. Despite removal from the Chrome Web Store, risks remain for users who haven’t uninstalled them. Regular audits and cautious permission granting are advised.
GitVenom Campaign Abusing Thousands of GitHub Repositories To Infect Users
The “GitVenom” malware campaign exploits GitHub’s ecosystem, distributing malicious code via fraudulent repositories targeting developers. Active since 2023, it uses social engineering to disguise malware
